Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
File:                     225c70bf-4322-3691-bda9-5b4b15a20e82.roa (raw, json)
Hash identifier:          L2PzQMwaDAyJyIU7hpiVsUlJ8J/jlpKBUh0nloyL6A0=
Subject key identifier:   42:47:CE:3B:28:B5:C2:F7:65:8A:29:F2:B3:AF:DD:23:F8:54:70:EA
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F432858477BF663A0E49C4F8662444E78
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     36103
IP address blocks:        23.88.160.0/20 maxlen: 20
                          64.77.208.0/23 maxlen: 23
                          68.70.232.0/22 maxlen: 22
                          68.70.236.0/24 maxlen: 24
                          68.70.247.0/24 maxlen: 24
                          68.70.253.0/24 maxlen: 24
                          68.70.254.0/24 maxlen: 24
                          74.50.216.0/21 maxlen: 21
                          97.75.224.0/23 maxlen: 23
                          198.135.172.0/22 maxlen: 22
                          204.225.16.0/20 maxlen: 20
                          208.101.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:63:a0:e4:9c:4f:86:62:44:4e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=2a74ee05-b862-4750-aa77-de6e5e1d0c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a7:ca:8a:f3:e1:b0:c2:92:7e:ce:53:cd:a0:
                    0f:6c:b7:b6:59:60:21:e4:a9:db:5f:80:bb:88:2a:
                    40:be:07:20:65:85:b0:04:e7:e9:95:2d:2e:c5:d3:
                    a4:cf:8f:1d:60:19:6f:1a:ae:cf:aa:10:b7:92:9a:
                    55:7f:00:bb:92:10:ea:3e:91:14:e5:14:a2:1d:47:
                    0b:a2:e8:16:57:61:6d:36:ca:e3:c9:76:b0:2a:64:
                    63:f5:ef:34:3a:02:e9:e7:13:ed:d2:92:84:35:71:
                    b3:28:11:92:04:ec:e5:83:0f:08:11:af:32:7e:48:
                    8d:24:61:4f:da:df:6b:1c:2c:b2:e2:d7:26:44:cd:
                    e7:69:cf:cf:dd:5f:08:52:73:ec:13:39:9b:f7:15:
                    bc:2c:6f:f1:a5:8e:45:f1:4e:3f:03:c5:fa:79:43:
                    0d:94:8b:c8:46:b4:a6:97:30:55:af:e7:49:ca:f0:
                    bf:c4:43:97:7e:bc:55:38:2c:20:ac:f5:bf:11:73:
                    11:e1:0a:57:22:3f:af:5e:ef:52:6d:66:92:6c:86:
                    b8:e9:72:97:9a:86:90:2d:9e:27:33:00:f2:57:e0:
                    e2:b6:0a:0b:46:f7:69:73:aa:07:3f:a4:2e:ab:da:
                    43:b6:cb:bd:66:86:1b:5d:48:f9:c9:fc:5e:64:dd:
                    95:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:CE:3B:28:B5:C2:F7:65:8A:29:F2:B3:AF:DD:23:F8:54:70:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/225c70bf-4322-3691-bda9-5b4b15a20e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.160.0/20
                  64.77.208.0/23
                  68.70.232.0-68.70.236.255
                  68.70.247.0/24
                  68.70.253.0-68.70.254.255
                  74.50.216.0/21
                  97.75.224.0/23
                  198.135.172.0/22
                  204.225.16.0/20
                  208.101.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:62:5a:3e:f4:63:7f:78:71:84:62:32:ad:6e:0b:30:d2:
         6e:ca:17:d6:7e:5a:7e:55:4a:bf:53:74:cb:54:c8:b0:58:b3:
         e7:4b:a4:66:bb:05:ed:c0:25:67:d5:05:49:a9:e4:fd:44:0d:
         ea:a1:29:16:19:7d:a3:e3:01:91:35:e8:bc:da:20:1c:dc:60:
         f2:e3:68:dc:7d:76:5c:4e:1e:ea:95:22:04:72:c9:07:7c:b3:
         77:b4:a4:9f:30:72:9c:18:3a:6c:54:f6:d8:25:1e:aa:53:1e:
         72:bc:74:0d:be:b6:2c:3e:8a:ff:13:c3:18:cf:9b:e6:15:37:
         60:4e:25:c1:a8:c6:ef:cb:ce:85:74:98:8e:97:ab:ab:3b:6c:
         ca:9f:fd:fe:93:ce:cd:08:34:c9:ab:0b:c4:bf:9b:7f:11:e1:
         12:d2:2d:ba:60:9c:3b:45:c2:a3:d3:76:c5:84:9b:cd:9d:94:
         77:71:a5:f1:c1:00:c1:67:d0:79:db:4c:29:cd:57:23:4c:e4:
         c2:31:36:0a:2c:f6:d8:b5:48:14:03:64:3d:3c:40:07:c7:bd:
         c7:2b:d2:71:d1:00:c4:c8:93:e1:13:c3:f7:25:df:e9:16:74:
         2b:01:0d:32:c9:f1:e6:cc:64:81:7c:c8:bc:cb:68:47:48:a6:
         40:94:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org